Did you configure the base value?  Apps-> Manage Apps -> dell ecs app for splunk -> set up ... View more

FYI - A new version of the App and TA (version 2.4) are available on Splunkbase. We updated to this version is all seems to be working now. ... View more

I opened a ticket with EMC and they informed me that "Remote Logging" are only logs that can be sent directly off the Unity platform. There is no way of gathering performance or capacity data that is supported by Dell/EMC. ... View more

a little late on the response. we have moved on from here. this should be updated in the EMC Isilon reference architecture. It implies CIFS is supported with Isilon. This is a problem with Windows based installations where there is no option for persistent NFS mounts or other means to set a coldpath. ... View more

The CEE TA shouldn't be used with Isilon. Isilon supports sending audit logs directly to syslog. Search for the Isilon add-on and app in splunkbase and install that. There are also instructions on how to configure the cluster to send the logs to a syslog server. ... View more